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Defining a system by 
a set of automata 
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Performing a first verification of the 
system by generating a partial verification 
solution pertaining to a first portion 
of the set of automata and 
generating a partial verification 
solution pertaining to a second 
portion of the set of automata 
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Modifying one or more 
automata of the first portion of 
the set of automata without 
modifying any automaton of 
the second portion of the set of 
automata 



I 



226 



Performing a second verification of the 
system by generating a partial verification 
solution pertaining to the first portion of 
the set of automata and using the partial 
verification solution pertaining to the second 
portion of the set of automata saved from 
the first verification 
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Fig. 2 
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Obtan a solution for 
a verification of a first 
instance of a system 
design 
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Save verification data 
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Modify system 
design 
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Obtain solution for 
verification of a next 

instance of the 
system design using 
the verification data 

saved from the 
previous instance 
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Fig. 3 
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Performing a first 
verification of the 
system 



Finding a state of 
the system for 
which no control 
action is defined 



Saving 
execution traces 
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Defining a control c 
action for the ^ 
under-defined state 



I 



Performing a second 

verification of the 
system beginning with 
the saved set of states 
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Fig. 5 



